Skill UI

This tool automates the end-to-end workflow for GDPR Data Subject Access Requests (DSAR). It handles identity verification, discovers PII across structured and unstructured data sources using NER and regex, maps data to Article 15 requirements, and generates auditable compliance reports, ensuring adherence to ICO/EDPB guidelines and scaling compliance efforts.

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.

Provides an expert methodology to significantly reduce AI API spending (40-80%) without sacrificing user quality. The guide covers cost auditing, optimizing existing systems, and designing cost-efficient architectures using techniques like model routing, prompt caching, output length control, and prompt compression.

This skill provides a comprehensive, read-only audit of a development workspace, including active repositories, installed plugins, connected services, and environment configurations. It analyzes existing capabilities against best practices to identify functional gaps and recommends the most valuable ECC-native skills, hooks, and workflows needed to enhance the development experience. Ideal for setup planning and architectural reviews.

This expert tool provides deep, systematic auditing of datasets to assess completeness, consistency, accuracy, and structural validity. It performs full data profiling, detects anomalies (outliers), analyzes missing data mechanisms (MCAR/MAR/MNAR), and calculates a Data Quality Score (DQS). Use it when validating data for model training, debugging pipelines, or establishing ongoing monitoring checks.

A comprehensive collection of agent skills for rigorously auditing digital interfaces and user flows. It evaluates designs against 168 research-backed UX/UI principles, detects common design antipatterns, and provides specialized review for AI-powered interfaces, ensuring adherence to modern best practices.

This skill provides a comprehensive, dual-engine audit for content, covering both Search Engine Optimization (SEO) and Answer Engine Optimization (AEO), along with readability metrics. It generates detailed scores (out of 100) and provides a severity-ranked list of issues (Critical, Important, Polish) with specific, actionable fix instructions. Use it before publishing to ensure content achieves optimal search performance and high engagement.